rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

really fix init out of base module problem

Browse Source
This commit is contained in:
Chris PeBenito 2006-04-05 19:58:26 +00:00
parent 3411c3c35d
commit 27c34bbe0d
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
refpolicy/policy/modules/system/init.if
View File

@ -194,7 +194,7 @@ interface(`init_getpgid',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
allow $1 init_t:process getpgid; allow $1 init_t:process getpgid;
@ -215,7 +215,7 @@ interface(`init_signull',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
allow $1 init_t:process signull; allow $1 init_t:process signull;
@ -236,7 +236,7 @@ interface(`init_sigchld',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
allow $1 init_t:process sigchld; allow $1 init_t:process sigchld;
@ -251,7 +251,7 @@ interface(`init_use_fds',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
allow $1 init_t:fd use; allow $1 init_t:fd use;
@ -266,7 +266,7 @@ interface(`init_dontaudit_use_fds',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
dontaudit $1 init_t:fd use; dontaudit $1 init_t:fd use;
@ -287,7 +287,7 @@ interface(`init_udp_send',`
type init_t; type init_t;
# cjp: remove this when init_t decl is moved back to this module # cjp: remove this when init_t decl is moved back to this module
type init_exec_t; type initctl_t;
') ')
allow $1 init_t:udp_socket sendto; allow $1 init_t:udp_socket sendto;

2
refpolicy/policy/modules/system/init.te
View File

@ -1,5 +1,5 @@
policy_module(init,1.3.5) policy_module(init,1.3.6)
gen_require(` gen_require(`
class passwd rootok; class passwd rootok;